CVE-2014-8092 Integer overflow in n/a
Remote authenticated users can cause denial of service or execute arbitrary code via integer overflows in X.Org Server functions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-8092?
CVE-2014-8092 is a medium-severity vulnerability in X.org X Server, published on 10 Dec 2014. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPutImage, (2) GetHosts, (3) RegionSizeof, or (4) REQUEST_FIXED_SIZE function, which triggers an out-of-bounds read or write.
Which versions are affected by CVE-2014-8092?
It affects 2 products.
Products include X.org X11, X.org X Server.
How do I fix CVE-2014-8092?
Upgrade to a fixed version.
Is CVE-2014-8092 being exploited?
There is no known exploitation of CVE-2014-8092 in the wild and no public exploit code.
Other vulnerabilities in X.org X Server
Sources
Also known as DEBIAN-CVE-2014-8092, GHSA-5xcf-4m43-c4p9, UBUNTU-CVE-2014-8092.